Patient Satisfaction Survey De-Identification with anonym.plus

Clear names from free-text survey comments before you analyse feedback.

Survey de-identification is the removal of personal data from patient feedback, above all the free-text comments. It meets the HIPAA Privacy Rule (45 CFR Part 164). anonym.plus runs on your device and keeps the scores and themes intact.

When this applies

Open comments often name a nurse, a doctor, or the writer's own case. To share feedback with units, those names come out while the praise or concern stays.

How anonym.plus handles it

  1. Load the responses into anonym.plus on your device.
  2. Local OCR reads scanned paper forms first.
  3. It scans each comment for names, dates, and contacts.
  4. Confirm the flags and keep the rating fields.
  5. Swap each named item, or black it out.
  6. Save the clean responses. Source forms stay local.

What you need to provide

PHI entity types detected

Categoryanonym.plus entity typeExample
PatientPERSON'I, Pia Lang, felt...' → [RESPONDENT]
StaffPERSON'nurse Tom was kind' → [STAFF]
DatesDATE_TIME'on May 3rd' → [DATE]
ContactPHONE_NUMBERcallback 0151-... → [PHONE]
ContactEMAIL_ADDRESSp.lang@example.com → [EMAIL]
LocationLOCATIONWard 9 → [LOCATION]

Compliance achieved

Anonymize satisfaction surveys offline — see plans & start free →

Limitations & cautions

Free-text comments are the riskiest part. A writer may give a job, a date, or a room that points to one person after the name goes. Review flagged comments, since an automated pass cannot judge every unique life clue.

Frequently asked questions

Are open comments PHI?

They can be. A comment that names the writer or a clinician, or that gives a unique clue, is personal data and must be cleared before wider sharing.

Do the scores survive?

Yes. Rating and score fields stay. Only the identifying detail in the text changes.

Can named staff be cleared too?

Yes. A comment that praises or blames a named worker is swapped, since their data is personal.